Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: N2S9nNMkAhZ3d9bIocnoTvrtGp8IoPvSoAR8FHAbPlw=
Subject key identifier: F0:6A:24:10:16:9E:AD:C1:44:01:84:79:61:29:C6:30:E1:45:D6:B4
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 0197B632A1F98EB832904541961798FDC2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:01:00 +0000
Manifest this update: Sat 28 Jun 2025 11:01:00 +0000
Manifest next update: Sun 29 Jun 2025 11:01:00 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: 131lHQrq/aKu5L2AmZC/RzSRisqYX/b3F7CZyJPL56o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a1:f9:8e:b8:32:90:45:41:96:17:98:fd:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Jun 28 11:01:00 2025 GMT
Not After : Jun 29 11:01:00 2025 GMT
Subject: CN=f06a2410169eadc1440184796129c630e145d6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:9e:1a:a8:54:3b:24:e1:62:2c:0a:a4:76:
06:13:15:4d:2f:97:ba:f4:f2:ca:81:8e:0b:40:19:
99:0d:6a:59:6c:c3:5d:37:6f:59:06:9e:23:08:de:
c2:3f:26:a2:43:e4:b0:d3:4a:20:2a:c0:77:80:7e:
4f:2f:ce:23:b9:6d:0d:2b:2d:94:09:37:b9:03:54:
e8:1b:a9:e2:49:21:71:4c:9a:03:3f:64:aa:8e:05:
52:51:19:74:a6:c7:60:03:36:6e:6a:3f:4d:dd:17:
cf:fa:72:99:1d:13:4d:ec:ea:74:be:16:c6:38:4c:
ab:1c:b9:f2:d1:67:fe:7e:d1:a5:b1:da:1b:40:95:
0b:32:c5:cb:9f:93:1b:d4:ca:72:44:c7:95:88:c7:
50:73:b1:d2:32:83:58:00:e7:93:d9:4c:41:25:2c:
0e:c6:94:71:67:68:0c:76:36:6f:58:7e:cc:67:71:
12:c0:63:fa:72:c1:16:94:ff:ec:2b:8d:23:c5:51:
e0:26:d3:7a:68:31:66:9f:5b:eb:d5:67:06:05:f1:
de:9b:34:b4:0f:b5:82:60:61:7f:ab:49:5e:4d:ab:
9d:7e:03:e1:8a:f0:2e:06:34:e7:e6:8d:93:83:75:
1e:44:d4:2d:69:e7:75:7e:96:12:2f:55:9a:f5:9b:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:24:10:16:9E:AD:C1:44:01:84:79:61:29:C6:30:E1:45:D6:B4
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:04:12:13:de:ba:f1:df:b9:8f:5d:dd:4a:80:c0:31:df:d2:
f8:78:d1:1e:f9:93:1f:60:5c:2b:58:89:1c:f7:cb:ce:5e:8c:
a3:8d:88:3a:61:4c:fb:5b:8e:aa:f5:92:ae:6b:5b:d5:7b:ef:
8a:48:a7:b9:18:97:67:a6:a1:45:8d:18:b9:8c:93:09:92:70:
c8:a3:4d:f0:95:43:b5:11:86:a9:d8:71:45:ca:fb:11:f2:b6:
28:71:06:85:32:25:12:24:d0:3f:43:aa:ce:80:55:80:4b:3a:
c3:0e:16:23:15:36:75:1a:18:15:c8:e2:b2:7b:d7:a1:eb:8c:
f3:3a:f4:8c:22:88:a3:53:de:a6:0a:64:5b:fb:88:97:e9:2a:
b6:50:a8:c8:39:4d:78:7d:a4:56:fb:b2:d5:22:c4:6c:a1:53:
10:a1:79:da:8e:c7:0b:48:f8:41:0a:9c:75:b3:c2:7e:3c:95:
86:d1:90:0d:0a:c5:75:0a:e2:5d:0d:a5:60:d4:63:c2:67:f6:
3e:c9:5a:44:4f:0c:10:5e:fe:14:0f:39:26:93:e8:53:41:09:
21:39:ba:0e:18:ff:c9:2c:b0:32:27:83:4d:ef:82:e2:2c:8b:
8e:4a:87:22:f6:c6:25:f1:bb:2a:bd:91:25:83:5b:f9:c0:f5:
08:5d:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:09 2025 by rpki-client